French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

An attacker used stolen passwords of staff at France's tax administration to take data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor France's cybersecurity agency ANSSI noticed the data leaving for seven weeks.

• Breach affected hundreds of thousands of taxpayers and businesses
• Data taken in June and July, undetected for seven weeks
• ANSSI: attack was not sophisticated, weak passwords to blame
• Neither tax administration nor ANSSI saw the data leave